Yeah, stuxnet type of distribution, you keep few of them around the office "dropped on the pavement" and chance of success is quite high
Plug anything into any port on our machines and it’ll either have the key to be recognised as one or our devices or be denied any sort of access.
This wasn’t always possible, but today even the keyboard is encrypted. And this is in a medium sized Danish municipality with a technical staff of 5, and it department of 20 and 10.000 employees.
If we can do it, any enterprise can do it.